Hi,

        In stress testing the latest ibmca engine, I've come across errors when 
running multiple server applications (each statically linked to openssl) on 
the same box.  The client machine is running openssl (software only), 
connecting to a server running w/ engine patch accelerating DES, SHA and RSA.

1) When both DES and SHA are accelerated on the server, a single client/server 
stress test works w/o errors.

2) When both DES and SHA are accelerated with multiple client/server 
connections,  errors occur  (usually SSL3_GET_RECORD:decryption failed or bad 
record mac or SSL3_GET_FINISHED:digest check failed) until only 1 connection 
remains.  

3) When I compile the server with only DES or only SHA in the engine, multiple 
client/server connections succeed with no errors.

4) I have not been able to reproduce this behavior outside of openssl+engine, 
i.e. DES and SHA testcases that concurrently call the hardware's library work 
fine.

        Are there any issues I should be aware of when running openssl and 
accelerating both DES and SHA?  It seems like something may be getting 
stomped on here...

Any help would be greatly appreciated.

Thanks,
Kent
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to